Share passwords with customers — without breaking compliance
Reset tokens, API keys, temporary access — deliver them safely without parking them in your ticket system or chat history.
Start free trialWhere support teams leak credentials
The tools support teams use every day are terrible places to store secrets — and yet that's exactly where they end up.
Ticket comments
Passwords pasted into Zendesk, Intercom, or Freshdesk comments get indexed, exported, and seen by anyone with ticket access.
Screenshots with PII
A quick "here's how to reset" screenshot often reveals session tokens, account IDs, or internal dashboards visible in the background.
Internal chat
Credentials dropped in Slack or Teams for "just this one customer" end up in search indexes and retention archives.
CRM compliance
SOC 2, ISO 27001, and HIPAA audits flag sensitive data stored in tools that weren't built for it. Your helpdesk counts.
A compliant delivery flow
Short-lived. Single-use. Encrypted end-to-end.
Create
The agent generates a one-time secret directly from the ticket.
Deliver
The link goes into the ticket. The password goes through a different channel.
Destroy
The customer opens it once. It's gone from our servers. Nothing left in the ticket to leak.
Built for support teams at scale
Compliance-friendly
Never stores plaintext credentials. Nothing to exclude from SOC 2 scope, nothing to redact in audit trails.
Secret Requests
Let customers send you credentials they shouldn't paste into a ticket. Encrypted inbound, not just outbound.
White-label branding
Serve secrets from your own domain. Customers see your brand, not ours.
API & CRM integration
Generate secrets from Zendesk, Intercom, or your internal tools. Public REST API with an official client library.
Read receipts
Know exactly when the customer opened it. Close the ticket with confidence.
Short expiration
Burn after read, or time-limit to an hour. Scoped to the life of the ticket, not your retention policy.
Effortless Integration
Seamlessly connect your tools, data and workflows in minutes.
Connect to the API
The provided client module enables a simple and convenient way to interact with the API.
<!-- Include in your app -->
<script type="module">
import { scrtLink } from 'https://scrt.link/api/v1/client-module';
// Instantiate client with API key.
const client = scrtLink('<your-api-key>');
client.createSecret('Some confidential information…').then(console.log);
</script>
API Response (JSON)
In the background the client module interacts with the Rest API. No further setup needed.
// Client module response:
{
"secretLink": "https://scrt.link/s#gOOei~kEkcYAAX-YJQnGooSXdSJg8MXkzk~2",
"receiptId": "D0waygL3",
"expiresIn": 86400000,
"expiresAt": "2025-04-24T16:15:52.172Z",
"viewLimit": 1
}
Make credential delivery a non-issue for compliance
Try scrt.link — or talk to us about white-label for your helpdesk.